blog posts

Imagine a world in which any novice hacker could easily monitor your every move, listen to your calls, read your text messages, empty your bank accounts in minutes, leave the house without having to, and maybe even cross a continent on the other side.

Of course, there is no need to imagine. We live in such a world right now, and there is also a Security hole in the SS7 (Signaling System no. 7) protocol, which all countries use in their mobile networks.

For many years, hackers have been able to access the text of text messages, phone calls, and their location only with the help of this Security hole and only by having a mobile phone number.

In one case of eavesdropping on a text message, the hacker easily accessed the victim’s “two-factor authentication” codes sent to the victim’s smartphone, posing a serious threat to the victim’s security.

Dynamic passwords sent via SMS were once considered the most secure. However, hackers can access this password through a Security hole in the SS7 protocol or other methods. Therefore, cybersecurity experts have devised a solution to protect their two-factor authentication (2FA) codes.

In this way, the dynamic password is no longer sent to the user; it is displayed on the phone in the application, and the only way for a hacker to access it is to access the phone physically. Numerous applications have been developed in this area.

Still, one of the safest and simplest is Google Authenticator, which we will fully introduce and explain how to use to protect your bank, email, and social Network accounts.

What is Google Authenticator?

Two-factor authentication, as the name implies, is a method in which the user must enter an additional factor to authenticate themselves, in addition to the usual password, to log in to an online account or application.

1. Cybersecurity experts divide authentication factors into what you know (password),

2. What you have (for example, a mobile phone);

3. What you are (for example, a fingerprint or any other biometric method). In the 2FA method, instead of one factor (what you know), two factors (what you know + what you have) are considered, namely the password and access to the phone, thus preventing hackers from infiltrating online accounts.

Two-factor authentication is an additional layer of security that requires a unique code to be displayed in a specific application on a user’s mobile phone or other smart devices.

You must have this code, along with a password and a username, to log in to accounts that use 2FA.

One of the top applications in this field is Google Authenticator, which is designed and published by Google and used with any website or service that supports two-factor authentication.

For example, all the major social networking websites such as Twitter, Instagram, Facebook, Gmail, and the number of accounts Rmzarz like Kvynbys and Baynes, 2FA support and activate the procedure for protecting these accounts, are critical.

The Google Authenticator app generates a one-time six-digit code that updates every 30 seconds.

The time limit on this code means that if a cybercriminal somehow manages to access your one-time use code, it is valid for only 30 seconds and will not work after that.

Google Authenticator and similar apps have no access to your accounts and will not connect to the site after the initial code transfer. This application generates code and does not require telecommunication services or even the Internet.

In addition, since these applications use the same standard, the code generated by Google Authenticator can be used to log in to any account, including Microsoft accounts.

In other words, these codes are not limited to Google products and apply to any website or service that supports the 2AF method.

Compared to similar apps, Google Authenticator supports only two core features: generating 2FA codes and exporting account information to another phone. For this reason, it is very easy to work with.

All you have to do is log in to your favorite account with your username and password as usual. Then, go to the section to activate the 2AF feature and scan the QR code displayed with this application. This will connect your account to the app, so you will need to enter the code shown in the app to log in.

We have explained how to enable 2FA for a Google Account in the following for convenience. Other websites follow similar steps, and you only need to find the two-factor authentication section, which is usually located in the Account Security section.

Warning: Even if enabling 2FA seems tedious, it’s best to allow it for any account that supports it. If you do not, the hacker who has access to your account password may do so. In this case, although it is not impossible to recover the account, it will undoubtedly take more time than you, and as long as the control of your account is in the hands of a hacker, it will probably cause you a lot of trouble.

Also, note that not having access to the mobile device running the Google Authenticator application means not having access to the accounts it’s connected to. We recommend installing this application on another phone or downloading backup codes from linked accounts.

Google Authenticator app download link

The Google Authenticator app is available for Android and iOS. You can download and install it for free from your phone’s App Store or Google Play.

Install Google Authenticator

Setting up the Google Authenticator app is very simple. After downloading and installing the application on your smartphone or tablet, you do not need to open the application.

1. First, from another computer, phone, or tablet, enter the page related to activating two-factor verification or two-step authentication (two-step authentication) on the website and activate this feature. This feature is usually located in the Security section of the account.

2. After this step, look for the option to use the authenticator app and click on it.

3. When launching 2FA, you are usually asked to scan the QR code. For this reason, you need another computer, phone, or tablet to enable this feature on your account. If you do not have access to another device or your phone’s camera does not work, you can select the setup key option instead of the QR code.

4. Now open the application. Click Get Started to the “Setup your first account” page.

5. Select the startup method. This step depends on the website you plan to enable 2FA for. The QR code scanning option is the most common startup method.

If you encounter a QR code when activating 2FA on a website, select the Scan a QR code option in the app.

6. If you are faced with a string of letters called “setup key”, select Enter a setup key from the application.

7. Now, scan the QR code displayed on the website with your phone.

8. To enter a setup key option, select your account’s desired name and enter the key manually in the bottom bar. Then, press the add button.

8. The account will connect to the Google Authenticator app once verified.

9. From now on, you will face a six-digit code whenever you open an application. This code is required to complete the login step to the connected account. Note that this code changes every 30 seconds. If the numbers displayed on the application change while you’re typing the code, delete the code you’ve entered and use the new code.

10. To add new accounts to the app, press the “+” button at the bottom of the page and select Scan a QR code (to scan the QR code) or Enter a setup key (to enter the startup key).

Learn how to use Google Authenticator for your Google Account

Perhaps the most important account you need to activate 2FA on today is your Google Account, because you have probably used your Gmail address to create an account on many websites.

Hacking your Gmail account also jeopardizes the security of the accounts connected to it. Here’s a step-by-step guide to enabling two-factor authentication for your Google Account. Other accounts follow roughly the same steps.

1. Open the Google 2-factor authentication page and click Get Started.

2. Enter your Google Account password and click Next.

3. At the bottom of the page, find the Authenticator app section and click SET UP.

4. On the open page, specify your phone type (Android or iPhone) and click Next.

5. You will see a QR code on the screen. If you can scan it, do so; otherwise, click “Can’t scan it” to display a code instead.

6. At this point, go to the phone and open the application. Select the Scan a QR code option to scan the displayed QR code. If you selected “Can’t scan it” in the previous step, select “Enter a setup key” in this step and enter the displayed code manually. This will add your account to the app.

7. Now click Next on the Google Authentication page.

8. On this page, enter the six-digit code displayed on the app and click Verify.

9. On the open page, you will be asked to use the code created in the Google Authenticator application to log in to your Google Account. Click Done.

Two-factor authentication is now enabled for your Google Account. Therefore, if a hacker with your password wants to log in to your Google account, the next step is to open an application and enter the six-digit code on which your account has been verified.

Still, because the hacker fortunately does not have access to your phone, he cannot log in to your account.

Benefits of using Google Authenticator

Although not all websites support two-factor authentication, enabling this Security feature on every website that supports it is a good idea. Although this adds an extra step to logging in to your online accounts, remember that doing so protects your accounts from hackers.

If you do not want to enable this feature for all your accounts, we suggest allowing it. Most of your accounts will be safe if your email Security is not compromised.

Using Google Authenticator dramatically increases the security of sensitive information by eliminating the need to send codes via SMS, which hackers can intercept. As you can see in this article, it is very easy to set up and use, and with a few simple steps, you can make it almost impossible for hackers to access your accounts.

In addition, this application does not require an antenna or Internet connection to generate code and is also helpful in airplane mode.

If you still doubt the importance of this security method, read the story of what happened to Matt Hahnen, a senior author at WIRED, in 2012. Within an hour, his entire digital life was destroyed.

First, his Google account was hacked and deleted, followed by his Twitter account. Finally, hackers logged in to his Apple ID and remotely deleted the data on his iPhone, iPad, and MacBook.

All these accounts were connected, so the hackers accessed Hannah’s Amazon account, obtained his Apple ID information, and entered his Gmail account, which allowed them to access his Twitter account.

It has been a decade since 2FA was available to all Internet users. However, in most cases, people are still satisfied with the same simple password, 123456, and even use it for several accounts. Such bad habits easily compromise users’ cybersecurity and sensitive information, making hackers’ lives much easier.

Enabling two-factor authentication with apps like Google Authenticator is a surefire way to prevent hackers from infiltrating your accounts.